Static task
static1
Behavioral task
behavioral1
Sample
bdfd362a4738411d0866f1311c077eaf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdfd362a4738411d0866f1311c077eaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdfd362a4738411d0866f1311c077eaf_JaffaCakes118
-
Size
470KB
-
MD5
bdfd362a4738411d0866f1311c077eaf
-
SHA1
fc8667b0cf9e7ccff9144f15b937a10b0ae722ff
-
SHA256
41a5137d6529802ab862319fb523d4be440727dbd0cd9c3f79ab95921984d969
-
SHA512
e0763eb7c02a7f57181ccb5bf891eb8cad28446b64eb034f66fa1ba6434d427439595a4acbc91aea6766aad42a5dbfd9ca9a5e0cb5b0a9f7f6af1dd76f25c500
-
SSDEEP
12288:W8BbaRmW2bGnKnRbKZ3SqJuj1a86lUF4LG:W8872bGnKRbp8u5cUF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdfd362a4738411d0866f1311c077eaf_JaffaCakes118
Files
-
bdfd362a4738411d0866f1311c077eaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
580e7c701bf79476e2743494640762db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
IsValidLocale
SetFilePointer
TlsFree
InitializeCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
GetTickCount
LCMapStringW
LoadLibraryA
GetFileType
SetEnvironmentVariableA
ExitProcess
WideCharToMultiByte
GetStringTypeW
GetCurrentProcessId
SetLastError
GetModuleHandleA
GetACP
InterlockedIncrement
GetTimeZoneInformation
HeapReAlloc
GetSystemTime
VirtualQuery
MultiByteToWideChar
GetCurrentProcess
CompareStringW
SetFileAttributesA
OpenMutexA
GetStdHandle
GetOEMCP
GetCurrentThread
CreateMutexA
GetLastError
QueryPerformanceCounter
GetProcAddress
GlobalLock
FreeEnvironmentStringsW
GetCurrentThreadId
RtlUnwind
VirtualAlloc
SetHandleCount
HeapDestroy
CompareStringA
HeapFree
TlsAlloc
GetSystemTimeAsFileTime
WriteFile
SetStdHandle
TlsGetValue
FlushFileBuffers
InterlockedExchange
EnterCriticalSection
ReadFile
GetEnvironmentStrings
UnhandledExceptionFilter
GetStartupInfoA
GetLocalTime
HeapCreate
DeleteCriticalSection
IsBadWritePtr
GetVersion
GetEnvironmentStringsW
InterlockedDecrement
GetCommandLineA
GetCPInfo
TerminateProcess
GetModuleFileNameA
HeapAlloc
GetStringTypeA
LCMapStringA
GetNumberFormatA
CloseHandle
VirtualFree
TlsSetValue
user32
MapVirtualKeyExW
GetDlgItem
IsRectEmpty
SetForegroundWindow
GetClipboardOwner
IsDialogMessage
CheckDlgButton
SendIMEMessageExA
UnhookWinEvent
EnumPropsExW
RegisterClassExA
ReplyMessage
DestroyWindow
RegisterClassA
CopyRect
GetMenuStringW
SetThreadDesktop
GetProcessWindowStation
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ